virus alert on task bar

Status
Not open for further replies.
knockout

knockout

Joined
May 10, 2006
Messages
20
Reaction score
0
Getting the alert and nothing has worked to get rid of it. Here is hijack scan file. Any help would e great! Thanks.
 

Attachments

Killed all virus, just can not get rid of the virus alert pop up by the clock on the task bar.
 
Hi knockout - run HijackThis and tick the following entries and click 'fix':


R3 - Default URLSearchHook is missing

O20 - Winlogon Notify: winkit32 - winkit32.dll (file missing)

O18 - Protocol: x-excid - {9D6CC632-1337-4A33-9214-2DA092E776F4} - c:\WINNT\Downloaded Program Files\mimectl.dll

Also check the following entries - do you know the IP or Domain '182.168.0.240,182.168.0.245'? If not, fix these entries also:

O17 - HKLM\System\CCS\Services\Tcpip\..\{44242998-6B57-4673-A2B2-58D90E8F5625}: NameServer = 182.168.0.240,182.168.0.245

O17 - HKLM\System\CCS\Services\Tcpip\..\{A2AD1420-5C29-4805-9265-D2E2D3E7FC78}: NameServer = 182.168.0.245,182.168.0.240

O17 - HKLM\System\CCS\Services\Tcpip\..\{AD8BBF39-2F56-475A-82AA-1BEAD2476FEB}: NameServer = 182.168.0.240,182.168.0.245

O17 - HKLM\System\CCS\Services\Tcpip\..\{BCB7F8C9-21DC-4979-887A-9D8DFE96EB2B}: NameServer = 182.168.0.240,182.168.0.245

O17 - HKLM\System\CCS\Services\Tcpip\..\{BE167EF9-D4CF-47FC-92D6-BBFAB75F799F}: NameServer = 182.168.0.240,182.168.0.245

O17 - HKLM\System\CCS\Services\Tcpip\..\{DEBE4FDF-B3D3-4B96-9B22-6DEC59A9CE0E}: NameServer = 182.168.0.245,182.168.0.240

Once you have done that, please go HERE and download and run the various utilities as instructed.

Finally, run CCleaner to get rid of all the unnecessary cr*p left behind on your system :thumb:
 
Sorry knockout, forgot to say - fix the items in safe-mode, then follow the other instructions in the links as stated :thumb:
 
knockout said:
Killed all virus, just can not get rid of the virus alert pop up by the clock on the task bar.
Click to expand...
And what does it say ?? Have you cleaned out Quarantine?

Go to HouseCall online and tell me what they say.



Norton lets in more 'flies' than an open window, get rid of it and install AntiVir or KAV ;)
 
The log appears clean - apart from those Domain entries - I assume they are OK as you have not deleted them?

What does the taskbar icon look like? - if you click on it now, what happens? What exactly does it warn you off? Does it refer you to a website, if so which one?
 
It is a green wheel chair that flashes between that and a round red circle with a line through it. Nothing happens, when you click on it. It does refer you to a web site, here is the link. hxxp://www.spyfalcon.com/?aff=264
 
Your HijackThis log shows no Spyfalcon infection, but there must be a few rogue remnants lying around.

They probably won't do any harm, but I understand you wanting to get rid of the remaining icon.

Have a go with THIS, its specifically for Spyfalcon, it may get rid of the last bits.

Other than that, I'm afraid I've run out of ideas
wallbash.gif
 
One final thought - have a look at your start-up programs (Start>Run>msconfig>(ok)>startup) and see if you can find any strange entries/programs listed which you don't recognise.

List any here - if we find it we may be able to disable it.
 
It says something about msconfig missing when I type in msconfig under run. Running windows 2000, by the way!
 
The damn thing is gone off my puter, have no idea what the hell I did or whatever! I did get a update from microsoft on malicious update removal and it is now gone after reboot! hmmmmmmmmmmmmmmmmmmmmmm! Thank god!
 
Glad to hear knockout
nod.gif
- this was the same as another one here with the problem, after using the fixes he still had the taskbar icon, then after a couple of re-boots it disappeared - no idea why either, but at least its gone :thumb:
 
Status
Not open for further replies.
Back
Top